[r3bl]

I understand that moving to Angular is not trivial, however this is old even for AngularJS.

1.7.x is in a long term support, while 1.6.x stopped being supported since July. The version they're running has at least three vulnerabilities: https://snyk.io/test/npm/angular/1.6.0

[mrighele]

Ah you're right about that. I was taking for granted that 1.6.x was the last before 2+.